IPv6 address to bind to

The options element contains all other global configuration options

Controls whether the server will be publicly listed.

If enabled (the default), Nix will only download binaries from binary caches if they are cryptographically signed with any of the keys listed in nix.settings.trusted-public-keys

Incoming search requests which match this filter are ignored.

Whether to filter IPv6 traffic with 6to4 destination addresses that correspond to IPv4 addresses that should not be routed over the public internet.

Name of the icon theme to use for regreet.

Port to bind the debug server to.

Port to bind the debug server to.

URL pages.sr.ht is being served at (protocol://domain)

Port to bind the debug server to.

URL paste.sr.ht is being served at (protocol://domain)

Address to bind the debug server to.

URL lists.sr.ht is being served at (protocol://domain)

Address to bind the debug server to.

Address to bind the debug server to.

Port for CGI server to listen on.

Where the IPFS Gateway can be reached

File path to a cert file.

The Console Token file to use.

The file mode creation mask is initialized to this value.

By default pam-u2f module does not inform user that he needs to use the u2f device, it just waits without a prompt

Range of user IDs used for the creation of regular users by useradd or newusers.

Range of user IDs used for the creation of regular users by useradd or newusers.

Upper level of template and static files path.

Plugin to use for the database.

Plugin to use for the database.

The port for serving SFTP requests

Configuration for /etc/gnupg/gpg-agent.conf

SSL port to bind to

Whether to enable DNSSEC.

Origin URL for the API

Origin URL for the API

Origin URL for the API

The Redis connection used for the Celery worker.

Whether to validate DNSSEC for DNS lookups.

Configure listen addresses and ports for webdavd.

See torrc manual.

See torrc manual.

Configuration for Collabora Online WebSocket Daemon, see https://sdk.collaboraonline.com/docs/installation/Configuration.html, or https://github.com/CollaboraOnline/online/blob/master/coolwsd.xml.in for the default configuration.

The port for serving HTTP(S) requests

Path to the file which contains the actual base64 encoded key

Maximum size of any given site (post-gunzip), in MiB.

Path to the srht mercurial extension (defaults to where the hgsrht code is)

A list of names of users that have additional rights when connecting to the Nix daemon, such as the ability to specify additional binary caches, or to import unsigned NARs

Whether to use redis support

The number of running kresd (Knot Resolver daemon) workers

CI adapters

Enable/disable the embedded DNS proxy server

See https://docs.dependencytrack.org/getting-started/configuration/#default-configuration for possible options

SSID to be used in IEEE 802.11 management frames.

Whether to use TLS encryption for DNS queries

config.yaml configuration as a Nix attribute set

Range of group IDs used for the creation of regular groups by useradd, groupadd, or newusers.

Range of group IDs used for the creation of regular groups by useradd, groupadd, or newusers.

DNS full-qualified domain name of a database server

DNS full-qualified domain name of a database server

Dedicated mail domain used for ephemeral SRS envelope addresses

Listen protocol. +unix means "over unix", not "in addition to."

If temperature is above this, fans will run at maximum speed.

If temperature is below this, fans will run at minimum speed.

The set of features supported by the machine

Proxy account name, without the possibility to include domain name ('at' sign is interpreted literally).

By default pam-u2f module sets the application ID to pam://$HOSTNAME

The name of the first admin user.

Command to run when this transition is taken

which update mechanism to use

which update mechanism to use

which update mechanism to use

Log level of the server.

Path for the lmtp daemon's unix socket

The URL to upload the journal entries to

Whether to enable Go Ethereum HTTP API.

Path in which suricata-update managed rules are stored by default.

Name of the interface.

Outgoing email for notifications generated by users.

Name of modem configuration file, will be searched for in config in the spooling area directory.

Multiaddr or array of multiaddrs describing the address to serve the local HTTP API on

Authentication token for connecting to InfluxDB.

Path to a program that can be used to set UNIX user passwords.

Encoding presets for recorded videos.

See torrc manual.

See torrc manual.

A list of names of users (separated by whitespace) that are allowed to connect to the Nix daemon

Database backend to use

Whether to send alerts for jobs added by RSS feeds

Kafka Listener List

Add stream events as stats.

TLS chain in pem format.

Configuration for tiny-dfr

The address on which to listen for connections.

Default zone for connections.

Whether to enable webapps.

The file to store the PID in.

Whether to enable TLS support.

A file containing a connection string for the database

User ID of the EBICS subscriber

The primary account of your instance (eg 'example.com').

Path to the certificate key file (if protocol is set to https or h2).

Comma-separated list of fetcher programs that retrieve collectd data.